How to Configure Aruba 7005 Wireless Controller with ArubaOS 8.9.0.3

[Turritopsis D. T. En M. <tdt...@gm...>]

Subject: How to Configure Aruba 7005 Wireless Controller with ArubaOS 8.9.0.3

Teo En Ming's Learning Notes - 7 Sep 2022 Wednesday
====================================================

PHASE 1 - LEARNING PHASE
=========================

Information Gathering
=====================

0. Look for DHCP Server in the network.

192.168.1.1

1. Need to get serial number of the 2 access points. Use the serial
number as the password to login to the access points.

---snipped---
---snipped---

2. Get the following information for the Aruba 7005 wireless controller.

a. IP address: 192.168.1.7
b. Subnet mask: 255.255.255.0
c. Default gateway 192.168.1.1

3. Copy the license keys from ArubaOS 6.5.4.23

Policy Enforcement Firewall (PEF) license key: ---snipped---
Access Point (AP) license key: ---snipped---
RF Protect (RFP) license key: ---snipped---

4. Find out the AP groups. AP Group: Internal, not using default AP group

AP Name, AP Group, AP IP, AP Type, AP MAC Address, AP Serial Number
Finance Dept, Internal, 192.168.1.9, 335, ---snipped---, ---snipped---
Near Entrance, Internal, 192.168.1.10, 335, ---snipped---, ---snipped---

5. Find out SSID and wireless password.

SSID: Teo En Ming Corporation Wi-Fi
Password: password
NEED TO HIDE SSID

6. Check if using RADIUS server or ClearPass.

Not using RADIUS authentication.

7. Check how many VLANs.

Only got 1 VLAN. VLAN: 1

SECTION 1 - FACTORY RESET THE ARUBA INSTANT IAP-335 ACCESS POINTS
==================================================================

Youtube video: Aruba Controller: Access Point Configuration and Setup
Link: https://www.youtube.com/watch?v=j-rpge_g_ho

To factory reset INSTANT AP
============================

Putty to Console port on Aruba Instant AP

Hit <Enter> to stop autoboot:

Commands:

factory_reset
saveenv
boot

Login to the web UI of the Aruba Instant AP using its IP address.

Username: admin
Password: admin

Click on Maintenance.

Click Convert tab.

Convert one or more Access Points to:
Campus APs managed by a Mobility Controller

Hostname or IP Address of Mobility Controller: 192.168.1.7

Click Convert Now.

It will download the image from the controller.

To factory reset a CAMPUS AP
=============================

Putty to console port of the Campus AP.

Hit <Enter> to stop autoboot:

Commands:

purgeenv
saveenv
boot

=================

Need to ensure there is DHCP server in the network, so that the APs
can obtain IP addresses after factory reset.

====================

SECTION 2 - CONFIGURE THE STANDALONE CONTROLLER
================================================

Youtube video: AOS8.0 Setup on Standalone Mobility Controller
Link: https://www.youtube.com/watch?v=vsfCnkBC590

Gather the following information for the Aruba 7005 wireless controller.

1. IP address
2. Subnet mask
3. Default gateway

==========

Get the license keys and key in below.

Configuration > System > Licensing > Installed Licenses

==========

Configuration > System > Licensing > Usage

Enable PEF and RF Protect

===============

Disable Control Plane Security as below.

Configuration > System > CPSEC

================

Provision Access Points FIRST

===============

THEN Create WLANs

- Find out the SSID
- Find out the wireless password

================

Youtube video: Aruba Wireless controller | Basic Installation and
Configuration | AOS 8.8
Link: https://www.youtube.com/watch?v=Ig8hrn6ITME

Section 3 - Configure Control Plane Security from above Youtube video (OPTIONAL)
=================================================================================

configure t

control-plane-security

auto-cert-prov

cpsec-enable

end

show control-plane-security

write memory

show control-plane-security

Other controller commands:

==============================

show ap database

================================

show version

====================

Section 4 - GOOD YOUTUBE VIDEO TO WATCH
=========================================

Youtube video: ArubaOS 8.9 Series – Part 1 – Virtual Mobility Controller (VMC)
Link: https://www.youtube.com/watch?v=U0A2747YY7c

PHASE 2 - ACTUAL IMPLEMENTATION PHASE - IMPLEMENTED ON 22 SEP 2022
THUR AT CUSTOMER SITE
===========================================================================================

Step 1. There is NO NEED to factory reset the 2 units of Aruba access points.

Step 2. Login to the web GUI of ArubaOS 6.5.4.23.

Step 3. Upgrade the firmware to version 8.9.0.3 straight away.

Step 4. Aruba 7005 wireless controller will reboot.

Step 5. Perform factory reset of the Aruba 7005 wireless controller
using ArubaOS 8.9.0.3. You must connect to the console port.

configure t

write erase

The controller will reboot again.

Step 6. Perform initial configuration of the Aruba 7005 wireless
controller using the console port. This can only be done through the
console port.

(a) full-setup

(b) standalone

Step 7. Login to the web GUI of ArubaOS 8.9.0.3.

Step 8. Activate the AP, PEF and RFP license keys.

Step 9. You need to approve the 2 units of unapproved access points.

Step 10. Then configure WLAN, that is, the SSID.

Step 11. Optional steps.

(a) Enable PEF license and RF Protect license
(b) Enable firewall visibility and deep packet inspection
(c) Hide the SSID.

That's all.

===THE END===

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com